chivgent 1.0.0 → 1.1.0

package/dist/session.js

@@ -1,4 +1,5 @@
 import { Agent } from "./agent.js";
+import { transcriptHash } from "./transcript-hash.js";
 import { addUsage } from "./providers/usage.js";
 import { createSessionId, SESSION_FORMAT_VERSION, } from "./session-store.js";
 /**
@@ -17,14 +18,24 @@ export class AgentSession {
     transcript;
     headerWritten;
     promptCount = 0;
+    promptInProgress = false;
+    controlInProgress = false;
     usageTotal;
+    compaction;
+    sessionTitle;
+    planModeEnabled;
     constructor(options) {
         this.id = options.id ?? createSessionId();
         this.cwd = options.cwd ?? process.cwd();
         this.store = options.store;
         this.now = options.now ?? (() => new Date());
         this.transcript = structuredClone(options.messages ?? []);
+        this.compaction = options.compaction === undefined ? undefined : structuredClone(options.compaction);
+        this.promptCount = options.promptCount ?? 0;
+        this.usageTotal = options.usage === undefined ? undefined : structuredClone(options.usage);
         this.headerWritten = options.resumed ?? false;
+        this.sessionTitle = options.title;
+        this.planModeEnabled = options.planMode ?? false;
         this.agent = new Agent({
             ...options.agent,
             onEvent: (event) => {
@@ -45,6 +56,82 @@ export class AgentSession {
     get toolNames() {
         return this.agent.toolNames;
     }
+    get title() { return this.sessionTitle; }
+    get planMode() { return this.planModeEnabled; }
+    async rename(title) {
+        this.beginControl("rename");
+        try {
+            const clean = title.trim();
+            if (!clean || clean.length > 120 || /[\x00-\x1f\x7f]/.test(clean))
+                throw new TypeError("Title must be 1–120 characters without control characters.");
+            await this.writeHeaderStrict();
+            if (this.store !== undefined) {
+                await this.store.append(this.id, { type: "session_rename", title: clean });
+                await this.store.flush?.();
+            }
+            this.sessionTitle = clean;
+        }
+        finally {
+            this.controlInProgress = false;
+        }
+    }
+    async setPlanMode(enabled) {
+        this.beginControl("change Plan Mode");
+        try {
+            if (this.planModeEnabled === enabled)
+                return;
+            await this.writeHeaderStrict();
+            if (this.store !== undefined) {
+                await this.store.append(this.id, { type: "session_plan_mode", enabled });
+                await this.store.flush?.();
+            }
+            this.planModeEnabled = enabled;
+        }
+        finally {
+            this.controlInProgress = false;
+        }
+    }
+    /** Persist a new empty session immediately so it appears in /resume. */
+    async initialize() {
+        this.beginControl("initialize");
+        try {
+            await this.writeHeaderStrict();
+            await this.store?.flush?.();
+        }
+        finally {
+            this.controlInProgress = false;
+        }
+    }
+    async compact(signal) {
+        this.beginControl("compact");
+        try {
+            if (this.compaction === undefined && this.transcript.length < 2)
+                throw new Error("There is no older conversation to compact safely.");
+            const result = await this.agent.compactHistory(this.transcript, this.compaction, signal);
+            if (!result.compacted)
+                return false;
+            if (signal?.aborted)
+                throw new Error("Compaction cancelled.");
+            const total = addUsage(this.usageTotal, result.usage);
+            await this.writeHeaderStrict();
+            if (this.store !== undefined) {
+                await this.store.append(this.id, { type: "session_compaction", compaction: result.compaction, transcriptHash: transcriptHash(this.transcript), ...(result.usage === undefined ? {} : { usage: total }) });
+                await this.store.flush?.();
+            }
+            this.compaction = result.compaction;
+            if (result.usage !== undefined)
+                this.usageTotal = total;
+            return true;
+        }
+        finally {
+            this.controlInProgress = false;
+        }
+    }
+    beginControl(action) {
+        if (this.promptInProgress || this.controlInProgress)
+            throw new Error(`Cannot ${action} while another session operation is running.`);
+        this.controlInProgress = true;
+    }
     subscribe(listener) {
         this.listeners.add(listener);
         return () => {
@@ -53,22 +140,41 @@ export class AgentSession {
     }
     /** Drops the transcript but keeps the session id and its log. */
     clear() {
+        if (this.promptInProgress)
+            throw new Error("Cannot clear a session while a prompt is running.");
+        if (this.controlInProgress)
+            throw new Error("Cannot clear a session while another session operation is running.");
         this.transcript = [];
+        this.compaction = undefined;
+        this.promptCount = 0;
+        this.usageTotal = undefined;
+        this.record({ type: "session_clear" });
     }
     async prompt(text, options = {}) {
-        await this.writeHeader();
-        this.promptCount += 1;
-        const result = await this.agent.run(text, {
-            history: this.transcript,
-            ...(options.signal === undefined ? {} : { signal: options.signal }),
-        });
-        this.transcript = result.messages;
-        this.usageTotal = addUsage(this.usageTotal, result.usage?.usage);
-        if (result.usage?.complete === false) {
-            this.usageTotal = { usage: this.usageTotal.usage, complete: false };
+        if (this.promptInProgress || this.controlInProgress) {
+            throw new Error("This session is already running a prompt.");
+        }
+        this.promptInProgress = true;
+        try {
+            await this.writeHeader();
+            this.promptCount += 1;
+            try {
+                return await this.agent.run(text, {
+                    history: this.transcript,
+                    ...(this.compaction === undefined ? {} : { compaction: this.compaction }),
+                    planMode: this.planModeEnabled,
+                    ...(options.signal === undefined ? {} : { signal: options.signal }),
+                });
+            }
+            finally {
+                // A Provider error still emits agent_end; flush that authoritative
+                // snapshot so a restart restores the same transcript as this process.
+                await this.flush();
+            }
+        }
+        finally {
+            this.promptInProgress = false;
         }
-        await this.flush();
-        return result;
     }
     header() {
         return {
@@ -80,6 +186,22 @@ export class AgentSession {
         };
     }
     dispatch(event) {
+        let persisted = event;
+        // agent_end is authoritative even for an error (where agent.run throws).
+        // Keep in-memory state and the persisted event snapshot identical.
+        if (event.type === "agent_end") {
+            this.transcript = structuredClone(event.messages);
+            this.compaction = event.compaction === undefined ? undefined : structuredClone(event.compaction);
+            this.usageTotal = addUsage(this.usageTotal, event.usage?.usage);
+            if (event.usage?.complete === false) {
+                this.usageTotal = {
+                    usage: this.usageTotal.usage,
+                    complete: false,
+                };
+            }
+            persisted = { ...event, promptCount: this.promptCount, sessionUsage: this.usageTotal,
+                ...(this.compaction === undefined ? {} : { compactionTranscriptHash: transcriptHash(this.transcript) }) };
+        }
         for (const listener of this.listeners) {
             try {
                 listener(event);
@@ -88,7 +210,7 @@ export class AgentSession {
                 // A failing subscriber must not change the outcome of the run.
             }
         }
-        this.record(event);
+        this.record(persisted);
     }
     record(event) {
         if (this.store === undefined ||
@@ -114,6 +236,12 @@ export class AgentSession {
             // Skip persistence for this run. A later prompt can retry the header.
         }
     }
+    async writeHeaderStrict() {
+        if (this.store === undefined || this.headerWritten)
+            return;
+        await this.store.append(this.id, this.header());
+        this.headerWritten = true;
+    }
     async flush() {
         try {
             await this.store?.flush?.();

package/dist/session.js.map

@@ -1 +1 @@
-{"version":3,"file":"session.js","sourceRoot":"","sources":["../src/session.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAA0C,MAAM,YAAY,CAAC;AAG3E,OAAO,EAAE,QAAQ,EAAmB,MAAM,sBAAsB,CAAC;AACjE,OAAO,EACL,eAAe,EACf,sBAAsB,GAGvB,MAAM,oBAAoB,CAAC;AAe5B;;;;;GAKG;AACH,MAAM,OAAO,YAAY;IACd,EAAE,CAAS;IACX,GAAG,CAAS;IAEJ,KAAK,CAAQ;IACb,SAAS,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC1C,KAAK,CAA2B;IAChC,GAAG,CAAa;IACzB,UAAU,CAAqB;IAC/B,aAAa,CAAU;IACvB,WAAW,GAAG,CAAC,CAAC;IAChB,UAAU,CAAyB;IAE3C,YAAY,OAA4B;QACtC,IAAI,CAAC,EAAE,GAAG,OAAO,CAAC,EAAE,IAAI,eAAe,EAAE,CAAC;QAC1C,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QACxC,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC3B,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAC7C,IAAI,CAAC,UAAU,GAAG,eAAe,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;QAC1D,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,OAAO,IAAI,KAAK,CAAC;QAC9C,IAAI,CAAC,KAAK,GAAG,IAAI,KAAK,CAAC;YACrB,GAAG,OAAO,CAAC,KAAK;YAChB,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;gBACjB,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YACvB,CAAC;SACF,CAAC,CAAC;IACL,CAAC;IAED,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED,8DAA8D;IAC9D,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;IAC9B,CAAC;IAED,SAAS,CAAC,QAA4B;QACpC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC7B,OAAO,GAAG,EAAE;YACV,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAClC,CAAC,CAAC;IACJ,CAAC;IAED,iEAAiE;IACjE,KAAK;QACH,IAAI,CAAC,UAAU,GAAG,EAAE,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,MAAM,CACV,IAAY,EACZ,OAAO,GAAsC,EAAE;QAE/C,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACzB,IAAI,CAAC,WAAW,IAAI,CAAC,CAAC;QAEtB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE;YACxC,OAAO,EAAE,IAAI,CAAC,UAAU;YACxB,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;SACpE,CAAC,CAAC;QACH,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC;QAClC,IAAI,CAAC,UAAU,GAAG,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACjE,IAAI,MAAM,CAAC,KAAK,EAAE,QAAQ,KAAK,KAAK,EAAE,CAAC;YACrC,IAAI,CAAC,UAAU,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QACtE,CAAC;QACD,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACnB,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM;QACJ,OAAO;YACL,IAAI,EAAE,SAAS;YACf,OAAO,EAAE,sBAAsB;YAC/B,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;YACnC,GAAG,EAAE,IAAI,CAAC,GAAG;SACd,CAAC;IACJ,CAAC;IAEO,QAAQ,CAAC,KAAiB;QAChC,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACtC,IAAI,CAAC;gBACH,QAAQ,CAAC,KAAK,CAAC,CAAC;YAClB,CAAC;YAAC,MAAM,CAAC;gBACP,+DAA+D;YACjE,CAAC;QACH,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;IAEO,MAAM,CAAC,KAAiB;QAC9B,IACE,IAAI,CAAC,KAAK,KAAK,SAAS;YACxB,CAAC,IAAI,CAAC,aAAa;YACnB,KAAK,CAAC,IAAI,KAAK,gBAAgB;YAC/B,KAAK,CAAC,IAAI,KAAK,uBAAuB,EACtC,CAAC;YACD,OAAO;QACT,CAAC;QACD,qEAAqE;QACrE,KAAK,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;YAChD,gEAAgE;QAClE,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,WAAW;QACvB,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACnD,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YAChD,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,sEAAsE;QACxE,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,KAAK;QACjB,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACP,mEAAmE;QACrE,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"session.js","sourceRoot":"","sources":["../src/session.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAA0C,MAAM,YAAY,CAAC;AAI3E,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,QAAQ,EAAmB,MAAM,sBAAsB,CAAC;AACjE,OAAO,EACL,eAAe,EACf,sBAAsB,GAIvB,MAAM,oBAAoB,CAAC;AAoB5B;;;;;GAKG;AACH,MAAM,OAAO,YAAY;IACd,EAAE,CAAS;IACX,GAAG,CAAS;IAEJ,KAAK,CAAQ;IACb,SAAS,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC1C,KAAK,CAA2B;IAChC,GAAG,CAAa;IACzB,UAAU,CAAqB;IAC/B,aAAa,CAAU;IACvB,WAAW,GAAG,CAAC,CAAC;IAChB,gBAAgB,GAAG,KAAK,CAAC;IACzB,iBAAiB,GAAG,KAAK,CAAC;IAC1B,UAAU,CAAyB;IACnC,UAAU,CAAgC;IAC1C,YAAY,CAAqB;IACjC,eAAe,CAAU;IAEjC,YAAY,OAA4B;QACtC,IAAI,CAAC,EAAE,GAAG,OAAO,CAAC,EAAE,IAAI,eAAe,EAAE,CAAC;QAC1C,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QACxC,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC3B,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAC7C,IAAI,CAAC,UAAU,GAAG,eAAe,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;QAC1D,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACrG,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,CAAC,CAAC;QAC5C,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC3F,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,OAAO,IAAI,KAAK,CAAC;QAC9C,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,KAAK,CAAC;QAClC,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,QAAQ,IAAI,KAAK,CAAC;QACjD,IAAI,CAAC,KAAK,GAAG,IAAI,KAAK,CAAC;YACrB,GAAG,OAAO,CAAC,KAAK;YAChB,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;gBACjB,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YACvB,CAAC;SACF,CAAC,CAAC;IACL,CAAC;IAED,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED,8DAA8D;IAC9D,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;IAC9B,CAAC;IAED,IAAI,KAAK,KAAyB,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;IAC7D,IAAI,QAAQ,KAAc,OAAO,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC;IAExD,KAAK,CAAC,MAAM,CAAC,KAAa;QACxB,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC5B,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;YAC3B,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,MAAM,IAAI,SAAS,CAAC,4DAA4D,CAAC,CAAC;YACrJ,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC/B,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC7B,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC3E,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;YAC7B,CAAC;YACD,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC;QAC5B,CAAC;gBAAS,CAAC;YAAC,IAAI,CAAC,iBAAiB,GAAG,KAAK,CAAC;QAAC,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,OAAgB;QAChC,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC,CAAC;QACtC,IAAI,CAAC;YACH,IAAI,IAAI,CAAC,eAAe,KAAK,OAAO;gBAAE,OAAO;YAC7C,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC/B,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC7B,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,CAAC,CAAC;gBACzE,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;YAC7B,CAAC;YACD,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC;QACjC,CAAC;gBAAS,CAAC;YAAC,IAAI,CAAC,iBAAiB,GAAG,KAAK,CAAC;QAAC,CAAC;IAC/C,CAAC;IAED,wEAAwE;IACxE,KAAK,CAAC,UAAU;QACd,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;QAChC,IAAI,CAAC;YAAC,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAAC,MAAM,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC;QAAC,CAAC;gBAC5D,CAAC;YAAC,IAAI,CAAC,iBAAiB,GAAG,KAAK,CAAC;QAAC,CAAC;IAC7C,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,MAAoB;QAChC,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;QAC7B,IAAI,CAAC;YACH,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;YACtI,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YACzF,IAAI,CAAC,MAAM,CAAC,SAAS;gBAAE,OAAO,KAAK,CAAC;YACpC,IAAI,MAAM,EAAE,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;YAC9D,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;YACtD,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC/B,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC7B,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,cAAc,EAAE,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;gBAC1M,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;YAC7B,CAAC;YACD,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;YACpC,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS;gBAAE,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC;YACxD,OAAO,IAAI,CAAC;QACd,CAAC;gBAAS,CAAC;YAAC,IAAI,CAAC,iBAAiB,GAAG,KAAK,CAAC;QAAC,CAAC;IAC/C,CAAC;IAEO,YAAY,CAAC,MAAc;QACjC,IAAI,IAAI,CAAC,gBAAgB,IAAI,IAAI,CAAC,iBAAiB;YAAE,MAAM,IAAI,KAAK,CAAC,UAAU,MAAM,8CAA8C,CAAC,CAAC;QACrI,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAChC,CAAC;IAED,SAAS,CAAC,QAA4B;QACpC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC7B,OAAO,GAAG,EAAE;YACV,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAClC,CAAC,CAAC;IACJ,CAAC;IAED,iEAAiE;IACjE,KAAK;QACH,IAAI,IAAI,CAAC,gBAAgB;YAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QAChG,IAAI,IAAI,CAAC,iBAAiB;YAAE,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;QAClH,IAAI,CAAC,UAAU,GAAG,EAAE,CAAC;QACrB,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;QAC5B,IAAI,CAAC,WAAW,GAAG,CAAC,CAAC;QACrB,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;QAC5B,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,MAAM,CACV,IAAY,EACZ,OAAO,GAAsC,EAAE;QAE/C,IAAI,IAAI,CAAC,gBAAgB,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC/D,CAAC;QACD,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC;QAE7B,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;YACzB,IAAI,CAAC,WAAW,IAAI,CAAC,CAAC;YACtB,IAAI,CAAC;gBACH,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE;oBAChC,OAAO,EAAE,IAAI,CAAC,UAAU;oBACxB,GAAG,CAAC,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC;oBACzE,QAAQ,EAAE,IAAI,CAAC,eAAe;oBAC9B,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;iBACpE,CAAC,CAAC;YACL,CAAC;oBAAS,CAAC;gBACT,mEAAmE;gBACnE,sEAAsE;gBACtE,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;YACrB,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,gBAAgB,GAAG,KAAK,CAAC;QAChC,CAAC;IACH,CAAC;IAED,MAAM;QACJ,OAAO;YACL,IAAI,EAAE,SAAS;YACf,OAAO,EAAE,sBAAsB;YAC/B,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;YACnC,GAAG,EAAE,IAAI,CAAC,GAAG;SACd,CAAC;IACJ,CAAC;IAEO,QAAQ,CAAC,KAAiB;QAChC,IAAI,SAAS,GAAe,KAAK,CAAC;QAClC,yEAAyE;QACzE,mEAAmE;QACnE,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YAC/B,IAAI,CAAC,UAAU,GAAG,eAAe,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAClD,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YACjG,IAAI,CAAC,UAAU,GAAG,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YAChE,IAAI,KAAK,CAAC,KAAK,EAAE,QAAQ,KAAK,KAAK,EAAE,CAAC;gBACpC,IAAI,CAAC,UAAU,GAAG;oBAChB,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,KAAK;oBAC5B,QAAQ,EAAE,KAAK;iBAChB,CAAC;YACJ,CAAC;YACD,SAAS,GAAG,EAAE,GAAG,KAAK,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,YAAY,EAAE,IAAI,CAAC,UAAU;gBAClF,GAAG,CAAC,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,wBAAwB,EAAE,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,CAAC;QAC9G,CAAC;QAED,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACtC,IAAI,CAAC;gBACH,QAAQ,CAAC,KAAK,CAAC,CAAC;YAClB,CAAC;YAAC,MAAM,CAAC;gBACP,+DAA+D;YACjE,CAAC;QACH,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACzB,CAAC;IAEO,MAAM,CAAC,KAAoB;QACjC,IACE,IAAI,CAAC,KAAK,KAAK,SAAS;YACxB,CAAC,IAAI,CAAC,aAAa;YACnB,KAAK,CAAC,IAAI,KAAK,gBAAgB;YAC/B,KAAK,CAAC,IAAI,KAAK,uBAAuB,EACtC,CAAC;YACD,OAAO;QACT,CAAC;QACD,qEAAqE;QACrE,KAAK,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;YAChD,gEAAgE;QAClE,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,WAAW;QACvB,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACnD,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YAChD,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,sEAAsE;QACxE,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,iBAAiB;QAC7B,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,aAAa;YAAE,OAAO;QAC3D,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QAChD,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;IAC5B,CAAC;IAEO,KAAK,CAAC,KAAK;QACjB,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACP,mEAAmE;QACrE,CAAC;IACH,CAAC;CACF"}

package/dist/shell/approval.d.ts

@@ -0,0 +1,15 @@
+/** Every shell call requires a positive user decision. */
+export type ShellApproval = (command: string, signal?: AbortSignal, context?: string) => Promise<boolean>;
+/**
+ * Shell permission is scoped to the current CLI process. Interactive sessions
+ * install a per-command prompt; headless sessions deny unless the user passes
+ * the explicit session-wide approval flag.
+ */
+export declare class ShellApprovalGate {
+    private readonly approveAll;
+    private handler;
+    constructor(approveAll?: boolean);
+    setHandler(handler: ShellApproval | undefined): void;
+    approve(command: string, signal?: AbortSignal, context?: string): Promise<boolean>;
+}
+//# sourceMappingURL=approval.d.ts.map

package/dist/shell/approval.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval.d.ts","sourceRoot":"","sources":["../../src/shell/approval.ts"],"names":[],"mappings":"AAAA,0DAA0D;AAC1D,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;AAE1G;;;;GAIG;AACH,qBAAa,iBAAiB;IAGhB,OAAO,CAAC,QAAQ,CAAC,UAAU;IAFvC,OAAO,CAAC,OAAO,CAA4B;IAE3C,YAA6B,UAAU,UAAQ,EAAI;IAEnD,UAAU,CAAC,OAAO,EAAE,aAAa,GAAG,SAAS,GAAG,IAAI,CAEnD;IAEK,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAKvF;CACF"}

package/dist/shell/approval.js

@@ -0,0 +1,25 @@
+/**
+ * Shell permission is scoped to the current CLI process. Interactive sessions
+ * install a per-command prompt; headless sessions deny unless the user passes
+ * the explicit session-wide approval flag.
+ */
+export class ShellApprovalGate {
+    approveAll;
+    handler;
+    constructor(approveAll = false) {
+        this.approveAll = approveAll;
+    }
+    setHandler(handler) {
+        this.handler = handler;
+    }
+    async approve(command, signal, context) {
+        if (signal?.aborted)
+            return false;
+        if (this.approveAll)
+            return true;
+        if (this.handler === undefined)
+            return false;
+        return (await this.handler(command, signal, context)) && signal?.aborted !== true;
+    }
+}
+//# sourceMappingURL=approval.js.map

package/dist/shell/approval.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval.js","sourceRoot":"","sources":["../../src/shell/approval.ts"],"names":[],"mappings":"AAGA;;;;GAIG;AACH,MAAM,OAAO,iBAAiB;IAGC,UAAU;IAF/B,OAAO,CAA4B;IAE3C,YAA6B,UAAU,GAAG,KAAK;0BAAlB,UAAU;IAAW,CAAC;IAEnD,UAAU,CAAC,OAAkC;QAC3C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAAe,EAAE,MAAoB,EAAE,OAAgB;QACnE,IAAI,MAAM,EAAE,OAAO;YAAE,OAAO,KAAK,CAAC;QAClC,IAAI,IAAI,CAAC,UAAU;YAAE,OAAO,IAAI,CAAC;QACjC,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QAC7C,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,IAAI,MAAM,EAAE,OAAO,KAAK,IAAI,CAAC;IACpF,CAAC;CACF"}

package/dist/shell/docker.d.ts

@@ -0,0 +1,20 @@
+import type { ShellConfig } from "./config.js";
+import type { ShellOperations } from "./types.js";
+/**
+ * A deliberately constrained Docker invocation. The only host mount is the
+ * working directory; no home, Docker socket, API credentials or host network
+ * are made available to commands.
+ */
+export declare const DEFAULT_SHELL_IMAGE = "node:22-alpine";
+export interface DockerShellOptions {
+    readonly image?: string;
+    readonly dockerExecutable?: string;
+    readonly containerName?: string;
+    readonly allowWrites?: boolean;
+    readonly allowNetwork?: boolean;
+}
+export declare function dockerShellConfig(cwd: string, options?: DockerShellOptions): ShellConfig;
+/** Synchronous best-effort cleanup for normal process exit and signal handlers. */
+export declare function killTrackedDockerContainers(docker?: string): void;
+export declare function createDockerShellOperations(options?: DockerShellOptions): ShellOperations;
+//# sourceMappingURL=docker.d.ts.map

package/dist/shell/docker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"docker.d.ts","sourceRoot":"","sources":["../../src/shell/docker.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAElD;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,mBAAmB,CAAC;AAEpD,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;IAC/B,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;CACjC;AAID,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,GAAE,kBAAuB,GAAG,WAAW,CAyC5F;AASD,mFAAmF;AACnF,wBAAgB,2BAA2B,CAAC,MAAM,SAAW,GAAG,IAAI,CAQnE;AAED,wBAAgB,2BAA2B,CAAC,OAAO,GAAE,kBAAuB,GAAG,eAAe,CAuB7F"}

package/dist/shell/docker.js

@@ -0,0 +1,97 @@
+import { existsSync, lstatSync, readFileSync, realpathSync } from "node:fs";
+import { randomUUID } from "node:crypto";
+import { spawnSync } from "node:child_process";
+import { createLocalShellOperations } from "./local.js";
+/**
+ * A deliberately constrained Docker invocation. The only host mount is the
+ * working directory; no home, Docker socket, API credentials or host network
+ * are made available to commands.
+ */
+export const DEFAULT_SHELL_IMAGE = "node:22-alpine";
+const PROTECTED_WRITE_PATHS = [".git", ".agents", ".codex", ".aws", ".ssh"];
+export function dockerShellConfig(cwd, options = {}) {
+    const workspace = realpathSync(cwd);
+    const image = options.image ?? DEFAULT_SHELL_IMAGE;
+    const docker = options.dockerExecutable ?? "docker";
+    if (!image || image.startsWith("-")) {
+        throw new TypeError("Invalid Docker image.");
+    }
+    const user = typeof process.getuid === "function"
+        ? `${process.getuid()}:${process.getgid?.() ?? process.getuid()}`
+        : "1000:1000";
+    return {
+        shell: docker,
+        args: [
+            "run", "--rm",
+            ...(options.containerName === undefined ? [] : ["--name", options.containerName]),
+            "--network", options.allowNetwork ? "bridge" : "none",
+            "--read-only",
+            "--cap-drop", "ALL",
+            "--security-opt", "no-new-privileges",
+            "--pids-limit", "64",
+            "--memory", "512m",
+            "--cpus", "2",
+            "--user", user,
+            "--tmpfs", "/tmp:rw,nosuid,nodev,size=64m",
+            "--mount", `type=bind,source=${workspace},target=/workspace${options.allowWrites ? "" : ",readonly"}`,
+            ...(options.allowWrites ? PROTECTED_WRITE_PATHS.flatMap((name) => {
+                const protectedPath = `${workspace}/${name}`;
+                if (!existsSync(protectedPath)) {
+                    return ["--tmpfs", `/workspace/${name}:ro,nosuid,nodev,size=1m`];
+                }
+                const entry = lstatSync(protectedPath);
+                if (entry.isSymbolicLink())
+                    throw new Error(`Protected path is a symlink; refusing write-enabled Docker shell: ${name}`);
+                if (name === ".git" && entry.isFile())
+                    throw new Error("Write-enabled Docker shell cannot safely protect a .git pointer file; use --shell-backend native on macOS or disable shell writes.");
+                return ["--mount", `type=bind,source=${protectedPath},target=/workspace/${name},readonly`];
+            }) : []),
+            "--workdir", "/workspace",
+            "--env", "HOME=/tmp",
+            image, "sh", "-c",
+        ],
+    };
+}
+/**
+ * Reuse the existing streaming, timeout and process-tree cancellation logic.
+ * A missing Docker binary or daemon fails the command; there is never a host
+ * shell fallback.
+ */
+const activeContainers = new Set();
+/** Synchronous best-effort cleanup for normal process exit and signal handlers. */
+export function killTrackedDockerContainers(docker = "docker") {
+    if (activeContainers.size === 0)
+        return;
+    const names = [...activeContainers];
+    activeContainers.clear();
+    spawnSync(docker, ["rm", "--force", ...names], {
+        stdio: "ignore",
+        timeout: 3_000,
+    });
+}
+export function createDockerShellOperations(options = {}) {
+    const docker = options.dockerExecutable ?? "docker";
+    return {
+        backend: `Docker (network ${options.allowNetwork ? "enabled" : "denied"}${options.allowWrites ? ", workspace writes enabled" : ", read-only workspace"})`,
+        async exec(command, cwd, execOptions) {
+            const containerName = `chivgent-${randomUUID()}`;
+            activeContainers.add(containerName);
+            const runner = createLocalShellOperations({
+                resolveConfig: () => dockerShellConfig(cwd, { ...options, containerName }),
+            });
+            try {
+                return await runner.exec(command, cwd, execOptions);
+            }
+            finally {
+                activeContainers.delete(containerName);
+                // Stopping the docker CLI does not always stop its daemon-managed
+                // container. Force-remove by a unique name on every exit path.
+                spawnSync(docker, ["rm", "--force", containerName], {
+                    stdio: "ignore",
+                    timeout: 3_000,
+                });
+            }
+        },
+    };
+}
+//# sourceMappingURL=docker.js.map

package/dist/shell/docker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"docker.js","sourceRoot":"","sources":["../../src/shell/docker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC5E,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,0BAA0B,EAAE,MAAM,YAAY,CAAC;AAIxD;;;;GAIG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,gBAAgB,CAAC;AAUpD,MAAM,qBAAqB,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAU,CAAC;AAErF,MAAM,UAAU,iBAAiB,CAAC,GAAW,EAAE,OAAO,GAAuB,EAAE;IAC7E,MAAM,SAAS,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IACpC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,mBAAmB,CAAC;IACnD,MAAM,MAAM,GAAG,OAAO,CAAC,gBAAgB,IAAI,QAAQ,CAAC;IACpD,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,SAAS,CAAC,uBAAuB,CAAC,CAAC;IAC/C,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU;QAC/C,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,IAAI,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,OAAO,CAAC,MAAM,EAAE,EAAE;QACjE,CAAC,CAAC,WAAW,CAAC;IAEhB,OAAO;QACL,KAAK,EAAE,MAAM;QACb,IAAI,EAAE;YACJ,KAAK,EAAE,MAAM;YACb,GAAG,CAAC,OAAO,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;YACjF,WAAW,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM;YACrD,aAAa;YACb,YAAY,EAAE,KAAK;YACnB,gBAAgB,EAAE,mBAAmB;YACrC,cAAc,EAAE,IAAI;YACpB,UAAU,EAAE,MAAM;YAClB,QAAQ,EAAE,GAAG;YACb,QAAQ,EAAE,IAAI;YACd,SAAS,EAAE,+BAA+B;YAC1C,SAAS,EAAE,oBAAoB,SAAS,qBAAqB,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE;YACrG,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;gBAC/D,MAAM,aAAa,GAAG,GAAG,SAAS,IAAI,IAAI,EAAE,CAAC;gBAC7C,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;oBAC/B,OAAO,CAAC,SAAS,EAAE,cAAc,IAAI,0BAA0B,CAAC,CAAC;gBACnE,CAAC;gBACD,MAAM,KAAK,GAAG,SAAS,CAAC,aAAa,CAAC,CAAC;gBACvC,IAAI,KAAK,CAAC,cAAc,EAAE;oBAAE,MAAM,IAAI,KAAK,CAAC,qEAAqE,IAAI,EAAE,CAAC,CAAC;gBACzH,IAAI,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,MAAM,EAAE;oBAAE,MAAM,IAAI,KAAK,CAAC,oIAAoI,CAAC,CAAC;gBAC7L,OAAO,CAAC,SAAS,EAAE,oBAAoB,aAAa,sBAAsB,IAAI,WAAW,CAAC,CAAC;YAC7F,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACR,WAAW,EAAE,YAAY;YACzB,OAAO,EAAE,WAAW;YACpB,KAAK,EAAE,IAAI,EAAE,IAAI;SAClB;KACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAC;AAE3C,mFAAmF;AACnF,MAAM,UAAU,2BAA2B,CAAC,MAAM,GAAG,QAAQ;IAC3D,IAAI,gBAAgB,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO;IACxC,MAAM,KAAK,GAAG,CAAC,GAAG,gBAAgB,CAAC,CAAC;IACpC,gBAAgB,CAAC,KAAK,EAAE,CAAC;IACzB,SAAS,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC,EAAE;QAC7C,KAAK,EAAE,QAAQ;QACf,OAAO,EAAE,KAAK;KACf,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,OAAO,GAAuB,EAAE;IAC1E,MAAM,MAAM,GAAG,OAAO,CAAC,gBAAgB,IAAI,QAAQ,CAAC;IACpD,OAAO;QACL,OAAO,EAAE,mBAAmB,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,uBAAuB,GAAG;QACzJ,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,WAAW;YAClC,MAAM,aAAa,GAAG,YAAY,UAAU,EAAE,EAAE,CAAC;YACjD,gBAAgB,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;YACpC,MAAM,MAAM,GAAG,0BAA0B,CAAC;gBACxC,aAAa,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,GAAG,EAAE,EAAE,GAAG,OAAO,EAAE,aAAa,EAAE,CAAC;aAC3E,CAAC,CAAC;YACH,IAAI,CAAC;gBACH,OAAO,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;YACtD,CAAC;oBAAS,CAAC;gBACT,gBAAgB,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;gBACvC,kEAAkE;gBAClE,+DAA+D;gBAC/D,SAAS,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,aAAa,CAAC,EAAE;oBAClD,KAAK,EAAE,QAAQ;oBACf,OAAO,EAAE,KAAK;iBACf,CAAC,CAAC;YACL,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/shell/factory.d.ts

@@ -0,0 +1,9 @@
+import type { ShellOperations } from "./types.js";
+export type ShellBackend = "auto" | "native" | "docker";
+export declare function createShellOperations(options?: {
+    backend?: ShellBackend;
+    allowWrites?: boolean;
+    allowNetwork?: boolean;
+    allowHostAccess?: boolean;
+}): ShellOperations;
+//# sourceMappingURL=factory.d.ts.map

package/dist/shell/factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"factory.d.ts","sourceRoot":"","sources":["../../src/shell/factory.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAGlD,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,QAAQ,GAAG,QAAQ,CAAC;AACxD,wBAAgB,qBAAqB,CAAC,OAAO,GAAE;IAAE,OAAO,CAAC,EAAE,YAAY,CAAC;IAAC,WAAW,CAAC,EAAE,OAAO,CAAC;IAAC,YAAY,CAAC,EAAE,OAAO,CAAC;IAAC,eAAe,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,eAAe,CAOzK"}

package/dist/shell/factory.js

@@ -0,0 +1,13 @@
+import { createDockerShellOperations } from "./docker.js";
+import { createNativeShellOperations } from "./native.js";
+import { ShellUnavailableError } from "./types.js";
+export function createShellOperations(options = {}) {
+    const backend = options.backend ?? "auto";
+    if (backend === "native" || (backend === "auto" && process.platform === "darwin")) {
+        return createNativeShellOperations({ allowWrites: options.allowWrites, allowNetwork: options.allowNetwork, allowHostAccess: options.allowHostAccess });
+    }
+    if (options.allowHostAccess)
+        throw new ShellUnavailableError("Host access is unavailable in the Docker shell backend; no command was run.");
+    return createDockerShellOperations({ allowWrites: options.allowWrites, allowNetwork: options.allowNetwork });
+}
+//# sourceMappingURL=factory.js.map

package/dist/shell/factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"factory.js","sourceRoot":"","sources":["../../src/shell/factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,2BAA2B,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,2BAA2B,EAAE,MAAM,aAAa,CAAC;AAE1D,OAAO,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAGnD,MAAM,UAAU,qBAAqB,CAAC,OAAO,GAAyG,EAAE;IACtJ,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,MAAM,CAAC;IAC1C,IAAI,OAAO,KAAK,QAAQ,IAAI,CAAC,OAAO,KAAK,MAAM,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,EAAE,CAAC;QAClF,OAAO,2BAA2B,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,eAAe,EAAE,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC;IACzJ,CAAC;IACD,IAAI,OAAO,CAAC,eAAe;QAAE,MAAM,IAAI,qBAAqB,CAAC,6EAA6E,CAAC,CAAC;IAC5I,OAAO,2BAA2B,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC;AAC/G,CAAC"}

package/dist/shell/local.d.ts

@@ -3,8 +3,12 @@ import { type ShellOperations } from "./types.js";
 export declare function validateTimeoutSeconds(value: number): number;
 export interface LocalShellOptions {
     /** Resolved once per command so a shell installed mid-session is picked up. */
-    readonly resolveConfig?: () => ShellConfig;
+    readonly resolveConfig?: (cwd: string) => ShellConfig;
+    /** Optional environment override; otherwise the child inherits the host environment. */
+    readonly env?: NodeJS.ProcessEnv;
 }
 /** Runs commands as child processes of this one. */
 export declare function createLocalShellOperations(options?: LocalShellOptions): ShellOperations;
+/** Keep host tool discovery while withholding provider credentials and shell startup injection. */
+export declare function safeShellEnvironment(): NodeJS.ProcessEnv;
 //# sourceMappingURL=local.d.ts.map

package/dist/shell/local.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"local.d.ts","sourceRoot":"","sources":["../../src/shell/local.ts"],"names":[],"mappings":"AAEA,OAAO,EAAsB,KAAK,WAAW,EAAE,MAAM,aAAa,CAAC;AAOnE,OAAO,EAML,KAAK,eAAe,EACrB,MAAM,YAAY,CAAC;AASpB,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAU5D;AAED,MAAM,WAAW,iBAAiB;IAChC,+EAA+E;IAC/E,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,WAAW,CAAC;CAC5C;AAED,oDAAoD;AACpD,wBAAgB,0BAA0B,CACxC,OAAO,GAAE,iBAAsB,GAC9B,eAAe,CA+EjB"}
+{"version":3,"file":"local.d.ts","sourceRoot":"","sources":["../../src/shell/local.ts"],"names":[],"mappings":"AAEA,OAAO,EAAsB,KAAK,WAAW,EAAE,MAAM,aAAa,CAAC;AAOnE,OAAO,EAML,KAAK,eAAe,EACrB,MAAM,YAAY,CAAC;AASpB,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAU5D;AAED,MAAM,WAAW,iBAAiB;IAChC,+EAA+E;IAC/E,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,WAAW,CAAC;IACtD,wFAAwF;IACxF,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CAClC;AAED,oDAAoD;AACpD,wBAAgB,0BAA0B,CACxC,OAAO,GAAE,iBAAsB,GAC9B,eAAe,CAiFjB;AAED,mGAAmG;AACnG,wBAAgB,oBAAoB,IAAI,MAAM,CAAC,UAAU,CAUxD"}

package/dist/shell/local.js

@@ -29,13 +29,13 @@ export function createLocalShellOperations(options = {}) {
             if (!existsSync(cwd)) {
                 throw new ShellUnavailableError(`Working directory does not exist: ${cwd}`);
             }
-            const config = resolveConfig();
+            const config = resolveConfig(cwd);
             // detached makes the child a process group leader, which is what lets a
             // cancel kill its descendants too.
             const child = spawn(config.shell, [...config.args, command], {
                 cwd,
                 detached: true,
-                env: env ?? process.env,
+                env: env ?? options.env ?? process.env,
                 stdio: ["ignore", "pipe", "pipe"],
             });
             if (child.pid !== undefined) {
@@ -77,6 +77,8 @@ export function createLocalShellOperations(options = {}) {
             }
             finally {
                 if (child.pid !== undefined) {
+                    // A command may leave background descendants in its process group.
+                    killProcessTree(child.pid);
                     untrackChildPid(child.pid);
                 }
                 if (timeoutHandle !== undefined) {
@@ -87,4 +89,17 @@ export function createLocalShellOperations(options = {}) {
         },
     };
 }
+/** Keep host tool discovery while withholding provider credentials and shell startup injection. */
+export function safeShellEnvironment() {
+    const result = {};
+    for (const key of ["PATH", "HOME", "TMPDIR", "LANG", "LC_ALL", "LC_CTYPE", "TERM", "NO_COLOR", "CI"]) {
+        const value = process.env[key];
+        if (value !== undefined)
+            result[key] = value;
+    }
+    result.HOME = process.env.TMPDIR ?? "/tmp";
+    result.BASH_ENV = "/dev/null";
+    result.ENV = "/dev/null";
+    return result;
+}
 //# sourceMappingURL=local.js.map

package/dist/shell/local.js.map

@@ -1 +1 @@
-{"version":3,"file":"local.js","sourceRoot":"","sources":["../../src/shell/local.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,kBAAkB,EAAoB,MAAM,aAAa,CAAC;AACnE,OAAO,EACL,eAAe,EACf,aAAa,EACb,eAAe,EACf,mBAAmB,GACpB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,eAAe,EACf,iBAAiB,EACjB,qBAAqB,GAItB,MAAM,YAAY,CAAC;AAEpB,MAAM,mBAAmB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;AAEzC,gFAAgF;AAChF,SAAS,SAAS,CAAC,MAA+B;IAChD,OAAO,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,OAAO,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAAa;IAClD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,SAAS,CAAC,+CAA+C,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,KAAK,GAAG,mBAAmB,EAAE,CAAC;QAChC,MAAM,IAAI,SAAS,CACjB,2BAA2B,mBAAmB,WAAW,CAC1D,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAOD,oDAAoD;AACpD,MAAM,UAAU,0BAA0B,CACxC,OAAO,GAAsB,EAAE;IAE/B,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,CAAC,GAAG,EAAE,CAAC,kBAAkB,EAAE,CAAC,CAAC;IAE5E,OAAO;QACL,KAAK,CAAC,IAAI,CACR,OAAe,EACf,GAAW,EACX,WAA6B;YAE7B,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,GAAG,EAAE,GAAG,WAAW,CAAC;YAC5D,IAAI,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;gBACtB,MAAM,IAAI,eAAe,EAAE,CAAC;YAC9B,CAAC;YACD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBACrB,MAAM,IAAI,qBAAqB,CAC7B,qCAAqC,GAAG,EAAE,CAC3C,CAAC;YACJ,CAAC;YAED,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;YAC/B,wEAAwE;YACxE,mCAAmC;YACnC,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE;gBAC3D,GAAG;gBACH,QAAQ,EAAE,IAAI;gBACd,GAAG,EAAE,GAAG,IAAI,OAAO,CAAC,GAAG;gBACvB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;aAClC,CAAC,CAAC;YAEH,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;gBAC5B,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC3B,CAAC;YAED,IAAI,QAAQ,GAAG,KAAK,CAAC;YACrB,IAAI,aAAyC,CAAC;YAC9C,MAAM,OAAO,GAAG,GAAS,EAAE;gBACzB,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;oBAC5B,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBAC7B,CAAC;YACH,CAAC,CAAC;YAEF,IAAI,CAAC;gBACH,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;oBACjC,aAAa,GAAG,UAAU,CAAC,GAAG,EAAE;wBAC9B,QAAQ,GAAG,IAAI,CAAC;wBAChB,OAAO,EAAE,CAAC;oBACZ,CAAC,EAAE,cAAc,GAAG,IAAI,CAAC,CAAC;gBAC5B,CAAC;gBAED,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;gBACjC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;gBACjC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;oBACzB,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;wBACnB,OAAO,EAAE,CAAC;oBACZ,CAAC;yBAAM,CAAC;wBACN,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;oBAC5D,CAAC;gBACH,CAAC;gBAED,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,KAAK,CAAC,CAAC;gBAClD,qEAAqE;gBACrE,IAAI,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;oBACtB,MAAM,IAAI,eAAe,EAAE,CAAC;gBAC9B,CAAC;gBACD,IAAI,QAAQ,EAAE,CAAC;oBACb,MAAM,IAAI,iBAAiB,CAAC,cAAc,IAAI,CAAC,CAAC,CAAC;gBACnD,CAAC;gBACD,OAAO,EAAE,QAAQ,EAAE,CAAC;YACtB,CAAC;oBAAS,CAAC;gBACT,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;oBAC5B,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBAC7B,CAAC;gBACD,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;oBAChC,YAAY,CAAC,aAAa,CAAC,CAAC;gBAC9B,CAAC;gBACD,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAChD,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"local.js","sourceRoot":"","sources":["../../src/shell/local.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,kBAAkB,EAAoB,MAAM,aAAa,CAAC;AACnE,OAAO,EACL,eAAe,EACf,aAAa,EACb,eAAe,EACf,mBAAmB,GACpB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,eAAe,EACf,iBAAiB,EACjB,qBAAqB,GAItB,MAAM,YAAY,CAAC;AAEpB,MAAM,mBAAmB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;AAEzC,gFAAgF;AAChF,SAAS,SAAS,CAAC,MAA+B;IAChD,OAAO,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,OAAO,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAAa;IAClD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,SAAS,CAAC,+CAA+C,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,KAAK,GAAG,mBAAmB,EAAE,CAAC;QAChC,MAAM,IAAI,SAAS,CACjB,2BAA2B,mBAAmB,WAAW,CAC1D,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AASD,oDAAoD;AACpD,MAAM,UAAU,0BAA0B,CACxC,OAAO,GAAsB,EAAE;IAE/B,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,CAAC,GAAG,EAAE,CAAC,kBAAkB,EAAE,CAAC,CAAC;IAE5E,OAAO;QACL,KAAK,CAAC,IAAI,CACR,OAAe,EACf,GAAW,EACX,WAA6B;YAE7B,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,GAAG,EAAE,GAAG,WAAW,CAAC;YAC5D,IAAI,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;gBACtB,MAAM,IAAI,eAAe,EAAE,CAAC;YAC9B,CAAC;YACD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBACrB,MAAM,IAAI,qBAAqB,CAC7B,qCAAqC,GAAG,EAAE,CAC3C,CAAC;YACJ,CAAC;YAED,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;YAClC,wEAAwE;YACxE,mCAAmC;YACnC,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE;gBAC3D,GAAG;gBACH,QAAQ,EAAE,IAAI;gBACd,GAAG,EAAE,GAAG,IAAI,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG;gBACtC,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;aAClC,CAAC,CAAC;YAEH,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;gBAC5B,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC3B,CAAC;YAED,IAAI,QAAQ,GAAG,KAAK,CAAC;YACrB,IAAI,aAAyC,CAAC;YAC9C,MAAM,OAAO,GAAG,GAAS,EAAE;gBACzB,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;oBAC5B,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBAC7B,CAAC;YACH,CAAC,CAAC;YAEF,IAAI,CAAC;gBACH,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;oBACjC,aAAa,GAAG,UAAU,CAAC,GAAG,EAAE;wBAC9B,QAAQ,GAAG,IAAI,CAAC;wBAChB,OAAO,EAAE,CAAC;oBACZ,CAAC,EAAE,cAAc,GAAG,IAAI,CAAC,CAAC;gBAC5B,CAAC;gBAED,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;gBACjC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;gBACjC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;oBACzB,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;wBACnB,OAAO,EAAE,CAAC;oBACZ,CAAC;yBAAM,CAAC;wBACN,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;oBAC5D,CAAC;gBACH,CAAC;gBAED,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,KAAK,CAAC,CAAC;gBAClD,qEAAqE;gBACrE,IAAI,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;oBACtB,MAAM,IAAI,eAAe,EAAE,CAAC;gBAC9B,CAAC;gBACD,IAAI,QAAQ,EAAE,CAAC;oBACb,MAAM,IAAI,iBAAiB,CAAC,cAAc,IAAI,CAAC,CAAC,CAAC;gBACnD,CAAC;gBACD,OAAO,EAAE,QAAQ,EAAE,CAAC;YACtB,CAAC;oBAAS,CAAC;gBACT,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;oBAC5B,mEAAmE;oBACnE,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;oBAC3B,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBAC7B,CAAC;gBACD,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;oBAChC,YAAY,CAAC,aAAa,CAAC,CAAC;gBAC9B,CAAC;gBACD,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAChD,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,mGAAmG;AACnG,MAAM,UAAU,oBAAoB;IAClC,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,KAAK,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,CAAC,EAAE,CAAC;QACrG,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,KAAK,KAAK,SAAS;YAAE,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IAC/C,CAAC;IACD,MAAM,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,IAAI,MAAM,CAAC;IAC3C,MAAM,CAAC,QAAQ,GAAG,WAAW,CAAC;IAC9B,MAAM,CAAC,GAAG,GAAG,WAAW,CAAC;IACzB,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/shell/native.d.ts

@@ -0,0 +1,15 @@
+import type { ShellConfig } from "./config.js";
+import type { ShellOperations } from "./types.js";
+export interface NativeShellOptions {
+    readonly allowWrites?: boolean;
+    readonly allowNetwork?: boolean;
+    /** Explicitly requested one-command host access; Seatbelt remains active. */
+    readonly allowHostAccess?: boolean;
+    readonly sandboxExecutable?: string;
+    readonly temporaryDirectory?: string;
+    readonly protectedPaths?: readonly string[];
+}
+/** Build a fail-closed macOS Seatbelt profile. Reads from user homes and shared temp are denied. */
+export declare function nativeShellConfig(cwd: string, options?: NativeShellOptions): ShellConfig;
+export declare function createNativeShellOperations(options?: NativeShellOptions): ShellOperations;
+//# sourceMappingURL=native.d.ts.map

package/dist/shell/native.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"native.d.ts","sourceRoot":"","sources":["../../src/shell/native.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,KAAK,EAAoB,eAAe,EAAE,MAAM,YAAY,CAAC;AAGpE,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;IAC/B,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;IAChC,6EAA6E;IAC7E,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC;IACnC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC7C;AAED,oGAAoG;AACpG,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,GAAE,kBAAuB,GAAG,WAAW,CA6C5F;AAED,wBAAgB,2BAA2B,CAAC,OAAO,GAAE,kBAAuB,GAAG,eAAe,CAsC7F"}